CyberRota Analysis
AI-GeneratedA vulnerability exists in the Linux kernel related to the handling of device-private huge pages, specifically during the downgrade of PMD entries. This flaw allows for the bypassing of memory protection mechanisms, potentially leading to unauthorized access to sensitive data. Organizations utilizing Linux systems, particularly those leveraging device-private memory management, should prioritize addressing this vulnerability to mitigate risks associated with memory protection failures.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade change_non_present_huge_pmd() rewrites a writable device-private PMD swap entry into a readable one without carrying pmd_swp_uffd_wp() across. The PTE-level change_softleaf_pte() does this correctly; mirror that here, matching what copy_huge_pmd() does for the fork path. Without the carry, a plain mprotect() over a UFFD_WP-marked device-private THP strips the bit and the trap is bypassed on swap-in.